CVE-2008-6970

Published: Aug 13, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter.

Affected (31)

Products: Ubbcentral: Ubb.threads

Ubbcentral

1 product

Ubb.threads

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Ubbcentral Ubb.threads	version ≤ 7.3.1
Ubbcentral Ubb.threads	Version 3.4
Ubbcentral Ubb.threads	Version 3.5
Ubbcentral Ubb.threads	Version 5.0
Ubbcentral Ubb.threads	Version 5.5.1
Ubbcentral Ubb.threads	Version 6.0.1
Ubbcentral Ubb.threads	Version 6.0.2
Ubbcentral Ubb.threads	Version 6.0.3
Ubbcentral Ubb.threads	Version 6.0
Ubbcentral Ubb.threads	Version 6.1.1
Ubbcentral Ubb.threads	Version 6.1
Ubbcentral Ubb.threads	Version 6.2.1
Ubbcentral Ubb.threads	Version 6.2.2
Ubbcentral Ubb.threads	Version 6.2.3
Ubbcentral Ubb.threads	Version 6.2
Ubbcentral Ubb.threads	Version 6.3.1
Ubbcentral Ubb.threads	Version 6.3
Ubbcentral Ubb.threads	Version 6.4.1
Ubbcentral Ubb.threads	Version 6.4.2
Ubbcentral Ubb.threads	Version 6.4.3
Ubbcentral Ubb.threads	Version 6.4.4
Ubbcentral Ubb.threads	Version 6.4
Ubbcentral Ubb.threads	Version 6.5.1.1
Ubbcentral Ubb.threads	Version 6.5.1
Ubbcentral Ubb.threads	Version 6.5.2
Ubbcentral Ubb.threads	Version 6.5.2_beta2
Ubbcentral Ubb.threads	Version 6.5.3
Ubbcentral Ubb.threads	Version 6.5
Ubbcentral Ubb.threads	Version 7.0
Ubbcentral Ubb.threads	Version 7.1
Ubbcentral Ubb.threads	Version 7.2